agent_smith | 7a6a186d8c86edd007716c1313098f01375d791887d4c26852de15589561c134

Analysis

max time kernel
4137432s
max time network
146s
platform
android_x86
resource
android-x86-arm-20220310-en
submitted
24-05-2022 14:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7a6a186d8c86edd007716c1313098f01375d791887d4c26852de15589561c134.apk
Size

27.7MB
MD5

cfc455dc2170aa3a55f2d9e181a2c8f4
SHA1

31b5bfc51ce15b22497b070fe20ddb0f34f255cd
SHA256

7a6a186d8c86edd007716c1313098f01375d791887d4c26852de15589561c134
SHA512

dcb2f47e26e1e951ecfdf4fc410ed20f8b54854f9608f3423ff12e1c38a620ba57fee5871b7164de5470e983fd15cc6441fa4d4957c826c532e0f17573feb2ab

Score

10^/10

agent_smith adware ransomware

Malware Config

Signatures

Agent smith
Agent smith is a modular adware that installs malicious ADs into legitimate applications.
adware agent_smith
Checks Android system properties for emulator presence. 1 IoCs

Processes:

com.e8game.fzdzz2

description ioc process

Accessed system property key: ro.hardware com.e8game.fzdzz2
Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.e8game.fzdzz2

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.e8game.fzdzz2

description	ioc	process
Accessed system property	key: ro.hardware	com.e8game.fzdzz2

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.e8game.fzdzz2

com.e8game.fzdzz2
1⤵
- Checks Android system properties for emulator presence.
- Uses Crypto APIs (Might try to encrypt user data).
PID:5081

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.e8game.fzdzz2/databases/jsb.sqlite
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.e8game.fzdzz2/databases/jsb.sqlite-journal
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.e8game.fzdzz2/databases/jsb.sqlite-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.e8game.fzdzz2/databases/jsb.sqlite-wal
Filesize
4KB

MD5
0e517ad1dd60ff47f39473b4030392a3

SHA1
3afba086539aef7ddb475214551c51ff578de03c

SHA256
86330362191e5821c049fb953db6af623de09614a56c1bc8b7aef56ea2560741

SHA512
76e6bb3958d2044af0d08e3241bafd65d427f948cb94921e4f6379a061a2a41d099eec26138ce407f5c8b3dfe390aa7bb87c109f261dd4623bf25ea871510c59

Download Submit
/data/user/0/com.e8game.fzdzz2/databases/ua.db
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.e8game.fzdzz2/databases/ua.db-journal
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.e8game.fzdzz2/databases/ua.db-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.e8game.fzdzz2/databases/ua.db-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.e8game.fzdzz2/databases/ua.db-wal
Filesize
28KB

MD5
01282651af838fca7feafac77743a452

SHA1
7616109c14efefbe5813cfbfb4f8314a7823c1a0

SHA256
bc095302c9da88b7fe66417f0cc72a5cbd2259511edeb3db8843b5ac6c32e008

SHA512
eefb113edffbb4d42f428a2aeb847da41bcf9cce79eb65c54ac17d942be123516a4ac0c48261884cf7079ee6dbf148ffd7c04855bc77aee789965fc9a0d14ddb

Download Submit
/data/user/0/com.e8game.fzdzz2/databases/ua.db-wal
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/KuYu/kuyubox.apktemp
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads